Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBBCE5E1DEB11F1B02D71BEDAE4EC9C.roa
File: 7FBBCE5E1DEB11F1B02D71BEDAE4EC9C.roa (raw, json)
Hash identifier: U5xGueBf3CUG484c6d5froPcI5fMGybBFNFGAGt1d1o=
Subject key identifier: BD:35:19:9E:42:58:B7:A7:B3:7F:EA:86:06:4A:2A:01:0D:FA:A5:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBBCE5E1DEB11F1B02D71BEDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 08:14:33 +0000
ROA not before: Thu 12 Mar 2026 08:14:28 +0000
ROA not after: Thu 16 Apr 2026 08:14:28 +0000
asID: 22773
IP address blocks: 156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
156.242.225.0/24 maxlen: 24
156.242.226.0/24 maxlen: 24
156.242.227.0/24 maxlen: 24
156.242.228.0/24 maxlen: 24
156.242.229.0/24 maxlen: 24
156.242.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107608 (0x1a458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 08:14:28 2026 GMT
Not After : Apr 16 08:14:28 2026 GMT
Subject: CN=69b275e9-2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:3f:14:29:dd:14:62:f7:37:f7:41:25:5a:
be:97:1c:9b:10:5c:4b:ad:6a:ff:34:ec:b8:16:0b:
2a:43:a1:a8:38:ea:4f:47:16:ec:38:d6:1c:75:4f:
89:fd:c5:0b:69:05:f6:3c:03:b1:b9:2f:50:f7:93:
4a:57:27:c1:53:8e:b9:c9:0b:1c:97:e4:b5:8a:2c:
fb:f7:d6:8f:e5:9e:31:e6:57:88:49:6b:61:90:e2:
92:9f:33:bc:ed:48:35:6c:e0:58:2a:0c:f9:82:82:
d2:4c:83:0d:83:53:04:09:d4:f1:bf:38:1a:e8:38:
00:92:9d:db:e2:fc:14:5a:54:88:8e:d7:3a:e3:df:
d9:87:3d:16:c9:c2:3c:9e:f8:84:5f:23:bc:48:a3:
c9:ed:ac:4d:2f:fe:60:09:eb:93:1e:0e:8c:48:f5:
5f:83:48:1f:7e:68:d2:24:39:2a:28:3f:39:90:fe:
a1:e3:fe:c8:0c:48:db:9b:3f:a4:d6:9b:e4:d7:dc:
60:09:f3:c1:7b:01:d0:74:a1:47:b4:e7:11:13:c0:
ac:0d:ff:1f:75:1a:29:51:21:9a:77:e7:b1:0b:ea:
66:f9:6b:f1:69:f9:0a:b3:08:a6:c1:94:15:b9:89:
22:95:a0:e2:86:97:60:7f:78:c7:8a:a9:da:05:30:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:19:9E:42:58:B7:A7:B3:7F:EA:86:06:4A:2A:01:0D:FA:A5:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBBCE5E1DEB11F1B02D71BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.49.0-156.242.50.255
156.242.52.0/23
156.242.225.0-156.242.230.255
Signature Algorithm: sha256WithRSAEncryption
13:56:e2:f9:2e:f9:0a:17:40:92:9d:0d:72:9c:b3:ab:7b:e9:
29:4b:f7:e0:8a:04:16:57:5a:ec:77:fe:5c:c2:c8:78:cd:f8:
e6:74:cf:cc:f6:f9:70:6f:43:61:e4:9a:ea:e0:0b:ae:0e:a9:
22:66:e1:7d:ed:e9:de:a7:2f:6f:a4:49:7a:b9:3b:39:3f:21:
38:a5:60:77:2f:37:a7:4b:04:c5:e4:15:45:7a:df:88:15:d3:
ea:d2:d3:a9:ab:d8:98:80:7d:0a:0c:69:ce:d8:ed:07:4c:c7:
d5:02:22:75:9d:81:a1:59:4b:7a:86:80:8b:60:ef:a5:08:7c:
26:f3:a2:ef:e6:61:cc:ff:16:19:55:e6:9d:fe:5e:6f:1e:95:
b7:ca:0e:f3:f4:a0:c2:cc:aa:0b:d9:e0:85:16:ce:a8:f7:e9:
b4:d5:ab:02:85:c2:71:8a:1d:d0:30:8c:6b:35:c7:7f:9a:fa:
b5:d0:60:b4:9e:52:3e:09:83:34:93:83:b1:66:b0:a0:5d:97:
17:58:cc:40:78:84:32:e6:4b:08:a2:6a:89:70:c9:81:82:0d:
a5:ac:a9:a2:7f:08:e0:24:dd:9b:34:9d:91:44:a2:1f:84:84:
9e:28:bd:ca:8f:0c:44:d3:a9:2e:e2:5e:be:9c:5b:a6:87:b0:
a3:e2:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:18 2026 by rpki-client